Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-9698

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CPANSec

Description

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HMBRAND DBI

Default version status: unaffected

  • 0 to < 1.648affected

References